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INTRODUCTION 

This  chapter  discusses  an  approach  to  test  pattern  generation  for  functional  testing  of  combinational 
digital  integrated  circuits.  The  techniques  to  be  presented  apply  all  possible  input  patterns  either  to 
the  entire  circuit  under  test  or  to  portions  of  the  circuit  under  test. 

For  some  circuits,  exhaustive  testing  is  economically  practical:  all  possible  input  combinations  are 
applied  to  the  entire  circuit.  An  exhaustive  test  is  a  complete  functional  test  and  no  assumptions 
about  the  internal  structure  of  the  circuit  under  test  are  required.  When  the  number  of  inputs  is  so 
large  that  an  exhaustive  test  is  impractical,  it  is  still  possible  to  retain  many  of  the  advantages  of 
exhaustive  testing  by  using  a  pseudo-exhaustive  test  technique.  Pseudo-exhaustive  testing  requires 
that  some  details  of  the  intemd  circuit  structure  either  be  known  or  assumed. 

The  minimum  structural  information  required  is  the  knowledge  of  which  inputs  affect  each  of  the 
outputs.  This  information  permits  each  of  the  circuit  outputs  to  be  tested  exhaustively,  a 
pseudo-exhaustive  test  called  output  function  verification.  If  output  function  verification  requires 
too  long  a  test,  additional  structure  information  is  required  in  order  to  permit  segmenting  the  circuit 
so  that  ea^  segment  can  be  tested  exhaustively,  a  technique  called  se^ent  verification  or  segment 
testing.  The  amount  of  structure  that  must  be  known  depends  on  the  circuit  and  the  acceptable  test 
length. 

Exliaustive  and  pseudo-exhaustive  testing  guarantee  100%  single-stuck  fault  coverage.  The 
coverage  of  other  classes  of  faults  is  discussed  in  connection  with  each  specific  technique. 

A  disadvantage  of  exhaustive  and  pseudo-exhaustive  testing  is  the  size  of  the  test  sets:  they  can  be 
substantially  larger  than  minimum-length  test  sets.  Test  set  size  affects  the  amount  of  memory  to 
store  the  set  and  the  time  to  apply  the  test.  For  exhaustive  or  pseudo-exhaustive  testing,  the  test 
application  time  can  be  long  but  the  memory  required  to  store  the  test  is  very  small  due  to  tl.e 
regularity  of  the  test  sets. 

The  major  advantages  of  exhaustive  and  pseudo-exhaustive  tests  are  the  extremely  high  fault 
coverage,  the  gener^ity  of  the  fault  model,  and  the  absence  of  a  requirement  to  do  fault  simulation. 
Another  advantage  of  output  function  verification  is  the  ease  of  generating  the  test  set. 
Segmentation  and  determination  of  the  corresponding  test  sets  requires  more  computation. 


BOOLEAN  TESTING 


The  words  test  and  testing  as  used  here  refer  only  to  "Boolean  Testing"  of  digital  integrated 
circuits.  A  Boolean  Test  is  defined  as  a  test  in  which  only  logical  signal  values  are  considered. 
Parametric  tests  of  digital  circuits  and  testing  analog  circuits  are  specifically  excluded  from  the 
discussion.  Verifying  the  correcmess  of  a  design  also  differs  from  Boolean  testing.  They  are 
closely  related  since  the  same  vectors  are  sometimes  used  for  both  purposes. 

Definition:  Design  verification  establishes  that  a  design  correctly  implements  a  behavioral 
specification.  The  customary  technique  for  design  verification  is  a  fault-free  simulation  of  the 
circuit  operation.  This  simulation  uses  a  set  of  "design  verification"  or  "simulation"  vectors  as 
inputs.  The  design  verification  vectors  are  typically  generated  manually  by  the  designer.  If  the 
correct  output  values  are  present  for  each  of  the  design  verification  inputs,  it  is  assumed  that  the 
design  is  correct 

Table  1  shows  design  verification  vectors  for  the  dual  4-line  to  1-line  multiplexer  of  Fig.  1.  Part  a 
of  the  table  lists  a  set  of  8  vectors  obtained  from  [Franz  85].  These  vectors  are  derived  by 
assuming  that  it  is  sufficient  to  verify  that  both  a  0-  or  a  1-signal  on  the  addressed  input  are  passed 
correctly  to  the  output  Part  b  lists  20  vectors  contributed  by  Prof.  Jan  Hlavicka.  He  assumed  that 
it  was  necessary  to  make  sure  that  a  1-signal  on  a  nonaddressed  line  wasn’t  propagated  to  the 
circuit  output 

It’s  not  surprising  that  different  approaches  lead  to  different  design  verification  vectors  since  there 
isn’t  any  standard  approach  to  generating  such  vectors.  In  fact,  the  only  way  to  truly  guarantee  the 
correctness  of  a  design  would  be: 

(1)  to  have  a  complete  specification  of  the  desired  output  for  every  possible  input, 
including  an  identification  of  those  inputs  for  which  the  output  was  not  specified,  and 

(2)  to  do  a  detailed  simulation  of  the  circuit  response  to  all  possible  inputs. 

It  is  usually  not  considered  feasible  to  do  such  a  thorough  verification  of  a  design.  Instead,  the 
designer  m^es  some  assumptions  about  the  implementation  and  selects  design  verification  vectors 
based  on  those  assumptions. 

Design  verification  vectors  are  discussed  here  only  because  they  arc  often  used  for  Boolean  testing 
as  well  as  design  verification.  Before  discussing  this  technique,  a  more  precise  definition  of 
Boolean  testing  will  be  given.  The  Fig.  1  multiplexer  will  be  used  as  a  running  example. 
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Table  1.  Design  Verification  Vectors  for  Fig.  1  Multiplexer,  (a)  8  vectors,  (b)  20  vectors 
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Dual  4-1ine  to  1-1ine  Multiplexer 
(153  or  HEF  4539B) 


Figure  1.  Dual  4-line  to  1-line  multiplexer  (54153  or  4539B  without  enable  circuits). 

Definition;  By  Boolean  testing  is  meant  the  application  of  a  s^uence  of  input  patterns  to  a  physical 
digital  device  (typically  a  die  on  a  silicon  wafer  or  a  packaged  integrated  circuit)  and  the  observation 
of  the  output  response  patterns  with  the  objective  of  determining  whether  or  not  the  device  is 
broken. 

This  definition  refers  to  input  and  output  patterns  in  order  to  rule  out  the  use  of  specific  voltages, 
currents  or  waveforms  to  determine  device  parameters.  Such  measurements  correspond  to 
parametric  rather  than  Boolean  testing.  Parametric  testing  is  discussed  in  [Camenzind  72]  and 
[Chrones  81]. 
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FUNCTIONAL  TESTING 


The  term  Bcxjlean  testing  is  used  here  to  describe  the  test  procedure  that  is  called  "functional 
testing"  by  the  manufacturers  of  automatic  chip  test  equipment.  This  usage  is  illustrated  by  the 
following  quote  from  pp.  in-A-3,4  of  [Doyle  ]: 

For  example,  a  TTL  bipolar  NOR  gate  may  switch  properly  and  show  the  proper  output 
voltage  levels  when  the  inputs  are  toggled,  but  it  may  require  significantly  higher  input 
current  than  normal  to  produce  the  change.  In  this  example,  the  TTL  gate  is  'functional'  in 
the  sense  that  the  truth  table  could  be  satisfied.  On  the  other  hand,  the  sample  failed  one  set 
of  'parametric'  tests.  That  is,  at  one  specific  temperature,  power  supply  voltage,  current, 
etc.,  the  unit  failed  because  of  high  input  current  By  the  same  token,  this  sample  may  well 
pass  all  tests  at,  for  instance,  a  lower  supply  voltage  or  a  different  temperature. 

Generally  speaking,  it  is  impossible  to  completely  separate  functional  from  parametric  testing. 

The  reason  for  introducing  a  new  term  is  the  existence  of  alternate  definitions  of  the  functional 
testing  terminology.  Only  integrated  circuit  chip  testing  is  discussed  here  —  board  test  is  closely 
related  and  is  also  very  important.  The  expression  "functional  testing"  is  used  in  connection  with 
board  test  to  specify  that  the  test  signals  are  applied  through  the  board  I/O  edge  connectors.  The 
other  major  type  of  board  test  is  called  "in-circuit  testing"  or  "bed-of-nails  testing."  This  refers  to 
the  use  of  a  special  fixture  that  allows  access  to  each  node  of  the  board  and  thus  allows  each 
component  to  be  tested  individually.  Automatic  test  equipment  for  board  test  is  discussed  in 
[Stover  84]. 

There  is  another  use  (or  misuse)  of  the  expression  "functional  testing."  It  is  sometimes  used  to 
describe  a  test  that  detects  failures  by  "verifying  correct  operation"  rather  than  by  verifying  the 
absence  of  specific  faults.  This  usage  is  based  on  the  desire  to  generate  test  patterns  without 
reference  to  a  specific  implementation  or  to  a  model  of  which  faults  are  detected  by  the  tests.  It  is 
not  uncommon  to  use  the  design  verification  vectors  for  such  a  "functional  test." 

The  effectiveness  of  using  the  design  verification  vectors  as  test  vectors  can  be  illustrated  with  the 
Fig.  2  implementation  of  the  Fig.  1  multiplexer.  The  20-vector  set  of  design  verification  vectors 
(Table  lb)  detects  all  single-stuck  faults,  but  is  a  rather  uneconomical  test  since  it  is  possible  to 
detect  all  single-stuck  faults  with  only  the  8  vectors  of  Table  2. 

The  set  of  8  design  verification  vectors  (Table  la)  detects  only  68%  of  the  single-stuck  node  faults. 
Whether  or  not  a  specific  fault  coverage  is  acceptable  can  be  approximated  in  terms  of  the  process 
yield  and  the  desired  maximum  defect  level  of  the  parts  after  testing.  This  determination  is 
discussed  in  [Williams  85].  The  defect  level  is  shown  to  equal  1  -  where  Y  is  the  process 
yield  and  T  is  the  single-stuck  fault  coverage  (fraction  of  single-stuck  faults  detected  by  the  test 
set).  For  a  68%  fault  coverage  and  a  process  yield  of  90%,  the  defect  level  is  predicted  to  be 
approximately  33,(XX)  DPM  (defects  per  million).  This  is  an  unacceptably  high  defect  level;  current 
industrial  practice  aims  at  defects  levels  below  100  DPM. 
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The  fault  coverage  (68%)  of  the  8  design  verification  vectors  was  determined  by  a  complete  fault 
simulation.  Since  fault  simulation  can  be  very  expensive  (in  computer  time)  for  large  circuits, 
simpler  methods  are  often  used  to  estimate  the  quality  of  a  test  set  One  popular  technique  checks 
that  each  node  of  the  circuit  is  "toggled,"  receives  bodi  a  0-signal  and  a  1-signal.  The  advantage  of 
this  approach  is  that  only  a  fault-free  rather  than  a  fault  simulation  is  necessary.  Such  Toggle  Test 
Sets  are  discussed  in  [Hughes  85].  Even  simpler  are  the  Pin  Test  Sets  that  check  only  that  the 
primary  inputs  and  primary  outputs  are  toggled. 

The  8  design  verification  vectors  toggle  all  nodes  and  thus  satisfy  the  requirements  of  both  the 
Toggle  Test  Set  and  the  Pin  Test  Set.  For  the  multiplexer  example  considered  here,  this  shows  that 
use  of  design  verification  vectors  and  either  a  Toggle  Test  Set  or  Pin  Test  Set  validation  could  lead 
to  the  use  of  a  test  set  with  only  68%  fault  coverage.  A  more  careful  technique  would  be  to  do  a 
fault  simulation  of  the  design  verification  vectors  and  than  choose  additional  vectors  until  an 
acceptable  fault  coverage  is  obtained.  By  adding  4  additional  vectors  to  the  8  verification  vectors,  it 
is  possible  to  get  100%  single-stuck  fault  coverage.  Thus,  the  augmented  verification  vector  set 
has  12  vectors  instead  of  the  8  required  for  full  single-stuck  fault  coverage. 

This  discussion  of  using  design  verification  vectors  for  Boolean  testing  demonstrates  some  of  the 
problems  that  can  arise  when  test  sets  are  generated  without  attention  to  the  structure  of  the  circuit 
being  tested.  In  fact  it  was  the  lack  of  success  with  the  generation  of  tests  based  on  the  functional 
operation  of  circuits  that  led  to  the  development  of  the  stuck-fault  model  and  the  use  of  structural 
information  to  generate  test  sets.  The  switch  from  "functional"  tests  to  "structural"  tests  was 
signalled  in  a  paper  presented  by  R.  Eldred  at  the  August  1958  meeting  of  the  ACM,  [Eldred  59]. 
The  opening  sentence  of  this  paper  is: 

In  order  for  the  successful  operation  of  a  test  routine  to  guarantee  that  a  computing  system 
has  no  faulty  components,  the  test  conditions  imposed  by  the  routine  should  be  devised  at  the 
level  of  the  components  themselves,  rather  than  at  the  level  of  programmed  orders. 

Because  of  the  complexity  and  density  of  modem  digital  circuits,  Boolean  testing  is  now 
recognized  as  an  important,  perhaps  limiting,  factor  in  the  continued  progress  in  integrated  circuit 
manufacture.  Two  aspects  of  Boolean  testing  are  currently  being  reexamined: 

(1)  The  adequacy  of  the  single-stuck  fault  model  for  VSLI  and  ULSI  is  being  studied 
because  other  types  of  faults  may  become  more  important  with  the  new  circuits,  and 

(2)  techniques  to  generate  tests  without  using  the  detailed  structure  of  the  circuit  are  being 
sought,  either  because  detailed  test  pattern  generation  is  becoming  too  expensive  or  because 
detailed  structural  information  is  not  available  for  many  catalog  parts. 

The  following  section  discusses  the  necessity  of  a  fault  model  for  test  pattern  generation.  Choices 
among  various  fault  models  are  considered.  A  very  restrictive  fault  model  like  single-stuck  faults 
permits  small  test  sets  but  can  fail  to  detect  many  actual  failures.  Weaker  fault  models  that  represent 
more  realistic  failure  modes  are  considered. 
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FAULT  MODELS 

It  is,  ’Ji  general,  impossible  to  determine  the  quality  of  a  test  set  for  a  circuit  without  making  some 
assumption  about  the  faults  that  are  to  be  detected  by  the  test. 

As  an  example  to  illustrate  this  statement,  consider  the  2-line  to  1-line  multiplexer  of  Fig.  3a.  Since 
this  is  a  3-input  combinational  circuit,  the  exhaustive  test  set  of  Table  3  diat  contains  all  8  valid 
input  vectors  should  test  the  circuit  completely.  However,  if  the  test  set  is  applied  in  the  order  given 
in  the  table,  it  fails  to  detect  the  bridging  fault  shown  in  Fig.  3b.  The  bridging  fault  causes  the 
topmost  input  to  the  multiplexer  to  be  equal  to  Ay,  the  AND  function  of  the  A-input  and  the 
y-output.  (Such  a  fault  could  not  occur  for  all  circuit  realizations,  but  there  are  circuit 
configurations  for  which  it  is  an  accurate  representation.) 

Table  3.  Exhaustive  Test  Set  for  Fig.  3  Circuit 
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1 

0 
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Figure  3.  Two-line  to  one-line  multiplexer,  (a)  Fault  free,  (b)  With  bridging  fault. 
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The  largest  fault  class  for  which  it  is  practical  to  generate  a  test  set  is  the  class  of  combinational 
faults,  faults  that  change  the  circuit  function  but  do  not  increase  the  number  of  states  in  the  circuit 
If  no  limit  is  imposed  on  the  number  of  extra  states  in  the  faulty  circuit,  then  it  is  impossible  to 
construct  a  complete  test  set,  a  test  set  that  detects  all  faults  that  change  the  circuit  function,  [Moore 
55].  Test  set  generation  for  "bounded  sequential  faults,"  faults  that  can  increase  the  number  of 
circuit  states  by  no  more  than  a  fixed  number  of  additional  states,  is  possible  in  principle  but  not  in 
practice.  The  qualifier  —  "ti,at  do  change  the  circuit  function"  —  is  used  above  in  order  to  allow 
for  the  presence  of  untestable  faults  in  the  circuit  under  test 


UNTESTABLE  FAULTS 

An  untestable  fault  is  a  fault  that  does  not  affect  the  circuit  function.  Untestable  faults  are  sometimes 
called  undetectable  faults.  There  are  four  mechanisms  that  can  cause  a  fault  to  be  untestable: 

(1)  Redundant  circuitry  —  the  fault  can  occur  in  some  portion  of  the  circuit  that  is  redundant  in  the 
sense  that  it  has  no  effect  on  the  circuit  function.  The  usual  reason  for  the  presence  of  redundancy 
is  a  design  mistake.  This  situation  is  demonstrated  in  Fig.  4a.  Stuck-at-1  faults  on  leads  1,2,3,  or 
4  are  untestable  as  are  stuck-at-O  faults  on  leads  5  or  6.  Since  either  M  or  N  is  always  0,  the  output 
of  the  bottom  OR  gate  (lead  2)  is  always  1.  Neither  the  bottom  OR  gate,  the  two  Inverters,  nor  the 
output  AND  gate  are  required  and,  in  fact,  the  output  function  could  be  taken  from  lead  G  rather 
than  F. 

(2)  Internal  signal  dependencies  —  there  may  be  one  or  more  internal  gates  at  whose  input  leads 
some  pattern  or  patterns  cannot  occur.  For  example,  in  Fig.  4b  it  is  not  possible  to  have  a  1 -signal 
on  both  inputs  to  the  OR  gate.  In  such  a  situation,  any  fault  that  changes  the  gate  function  for  only 
the  input  combinations  that  never  occur  will,  of  course,  have  no  effect  on  the  entire  circuit 
operation.  In  Fig.  4b  an  example  of  such  a  fault  is  one  which  changes  the  OR  gate  to  an  XOR  gate. 
TTie  presence  of  such  faults  cannot  be  detected  by  a  Boolean  test. 

(3)  Hazard  control  circuitry  —  if  part  of  the  circuit  is  present  to  eliminate  a  hazard,  faults  that 
disable  the  hazard  control  will  not  be  detectable  since  they  have  no  effect  on  the  static  circuit 
operation.  In  Fig.  4c  the  output  H  of  the  bottom  AND  gate  is  only  1  when  both  A  and  B  are  1,  in 
which  case  one  of  the  other  AND  gate  outputs  must  be  1  since  X  or  X'  must  be  1 .  The  bottom 
AND  gate  is  present  only  to  prevent  a  static  logic  hazard  and  cannot  be  detected  by  a  Boolean  test. 
For  a  discussion  of  hazards,  see  Chapter  3  in  [McCluskey  86]. 

(4)  Error  control  circuitry  —  Circuitry  is  sometimes  added  to  a  design  in  order  to  detect  failures 
while  the  system  is  in  use.  The  circuit  in  Fig.  5  is  a  2-line  to  4-line  decoder  with  added  error 
detection  circuitry.  Since  exactly  one  of  the  decoder  outputs  is  equal  to  1,  one  of  the  OR  gate 
outputs  is  always  1  and  the  XOR  gate  output  (E)  is  always  1.  Any  decoder  failure  that  causes  all 
outputs  to  be  0  will  change  E  to  0  since  both  inputs  to  the  XOR  gate  will  be  0.  Similarly  any  failure 
that  makes  both  inputs  to  the  XOR  gate  equal  to  1  will  change  E  to  0.  When  the  decoder  circuitiy’  is 
fault-free,  the  E  output  is  always  1,  so  that  the  fault  E  stuck-at-1  is  undetectable. 
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Figure  5.  2-line  to  4-line  decoder  with  error  detection  circuits. 


EXHAUSTIVE  TEST  SETS 

In  order  to  test  a  circuit  for  the  presence  of  combinational  faults,  an  exhaustive  test  set  is  required. 

Definition:  An  Exhaustive  Test  Set  for  an  n-input  combinational  circuit  is  the  set  of  all  2”  possible 
input  vectors.  For  a  sequential  circuit,  an  exhaustive  test  set  is  a  checking  experiment,  [Friedman 
71]. 

The  exhaustive  test  set  for  the  Fig.  1  multiplexer  consists  of  all  10-bit  patterns,  1024  of  them,  since 
there  are  10  inputs  to  this  circuit.  Only  combinational  circuits  are  considered  here.  Sequential 
circuit  testing  is  important,  but  it  appears  uneconomic  to  test  large  sequential  circuits  without  using 
a  scan  path  technique  to  permit  the  use  of  combinational  circuit  tests,  [McCluskey  86]. 

Theorem.  The  smallest  test  set  that  detects  any  combinational  fault  in  an  n-input  combinational 
circuit  is  the  2"  pattern  exhaustive  test  set. 

Proof.  Suppose  a  shorter  test  set  is  used.  Then  at  least  one  input  pattern  is  not  applied.  The 
combinational  fault  that  changes  the  circuit  function  for  only  this  input  pattern  will  not  be  detected. 
Suppose  all  input  patterns  are  applied,  then  any  combinational  fault  must  change  the  circuit  output 
for  at  least  one  pattern  causing  the  fault  to  be  detected. 
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There  are  two  difficulties  with  exhaustive  test  sets: 

(1)  There  are  two  classes  of  physical  failures  that  can  cause  non-combinational  faults.  The 
bridging  fault  of  Fig.  3b  is  an  example  of  one  such  fault  class  that  can  fail  to  be  detected  by  an 
exhaustive  test  Failures  in  which  two  points  in  a  circuit  are  incorrectly  connected  together  are  not 
uncommon.  Such  failures  can  be  modelled  as  bridging  faults,  [Mei  74].  Some  bridging  faults  can 
introduce  additional  states  into  a  circuit 

The  other  important  non-combinational  faults,  stuck-open  faults,  occur  in  MOS  circuits.  They  are 
caused  by  charge  storage  on  nodes  that  have  some  of  their  connections  removed  due  to  open-circuit 
failures,  [Wadsack  78].  A  lot  of  attention  is  now  directed  towards  detecting  MOS  stuck-open 
faults.  One  approach  derives  tests  for  specific  MOS  stuck-open  faults  and  adds  these  to  a 
stuck-fault  test  set,  [Reddy  83],  [Jha  85].  This  process  is  expensive  in  the  amount  of  required 
computation.  Another  method  adds  circuitry  to  the  MOS  circuit  to  facilitate  testing  for  MOS 
stuck-open  faults,  [McCluskey  81],  [Liu  87].  The  cost  penalty  for  this  technique  is  the  area 
overhead  of  the  additional  circuits.  The  most  promising  method  when  the  layout  can  be  controlled 
is  to  design  the  gate  geometry  so  as  to  reduce  the  possibility  of  a  MOS  stuck-open  fault  to  an 
acceptably  low  value,  [Zasio  85],  [Koeppe  87].  A  recent  study  to  determine  whether  stuck-open 
faults  occurred  in  significant  numbers  in  production  CMOS  chips  did  not  detect  any  stuck-open 
faults,  [Turner  85].  This  suggests  that  stuck-open  faults  may  not  be  a  concern  for  well-designed 
CMOS  chips. 

Bridging  faults  have  received  much  less  attention  than  MOS  stuck-open  faults,  but  there  seems  to 
be  no  justification  for  this.  The  bridging  faults  appear  to  be,  if  anything,  more  common  than  the 
MOS  stuck-open  faults.  It  is  possible  to  generate  tests  for  specific  bridging  faults  and  add  these  to 
a  stuck-fault  test  set.  Another  approach  would  be  to  control  the  layout  to  reduce  the  probability  of 
non-combinational  bridging  faults. 

(2)  The  other  difficulty  with  exhaustive  test  sets  is  that  they  can  be  very  long.  For  an  n-input 
combinational  circuit,  all  2"  input  patterns  are  required  for  an  exhaustive  test. 

If  the  number  of  inputs  to  a  circuit  is  so  large  that  exhaustive  testing  is  not  feasible,  it  is  necessary 
to  adopt  a  more  restrictive  fault  model  than  the  combinational  fault  model. 


PSEUDO-EXHAUSTIVE  TEST  SETS 

For  circuits  in  which  each  circuit  output  depends  on  a  subset  of  all  the  inputs,  it  may  be  feasible  to 
test  each  output  exhaustively  even  though  the  entire  circuit  is  not  tested  exhaustively.  This 
technique  is  based  on  a  fault  model,  the  constrained  dependence  fault  model,  which  assumes  that 
the  set  of  inputs  on  which  a  circuit  output  depends  is  not  increased  by  the  presence  of  the  fault. 
The  corresponding  test  set  that  applies  all  input  combinations  of  each  set  of  inputs  on  which  a 
circuit  output  is  dependent  is  called  a  pseudo-exhaustive  output  function  verification  test  set, 
[McCluskey  82A,B,  83,  84A,B].  Since  each  of  the  outputs  in  the  Fig.  2  multiplexer  depends  on  6 


iT, 


4 


c 

r. 


BUILT-IN  TESTING:  EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TESTING  1 2 


5 


s 

s 


(V 

A 

w 


I 


inputs,  each  output  can  be  tested  exhaustively  with  64  patterns.  It  is  possible  to  test  both  outputs  at 
the  same  time,  using  only  64  patterns,  by  using  the  pseudo-exhaustive  test  method. 

For  some  circuits,  this  output  function  verification  test  may  be  too  lengthy.  A  further  restriction  on 
the  fault  class  test  is  then  necessary.  The  circuit  must  be  then  segmented  into  subcircuits,  each  of 
which  is  tested  exhaustively.  This  process  is  called  pseudo-exhaustive  segment  function 
verification  and  is  described  in  [McCluskey  81].  For  the  Fig.  2  multiplexer  circuit  this  type  of  test 
can  be  done  with  16  (rather  than  64)  patterns.  Each  of  the  six  AND-OR  circuits  labelled  in  the 
figure  is  tested  exhaustively. 

VERmCATION  TESTING 

Most  combinational  networks  have  more  than  one  output.  In  many  cases  each  of  the  outputs 
depends  on  only  a  subset  of  the  inputs.  For  example,  the  parity  generator  network  of  the  T1 
SN54/74LS630  (shown  in  Fig.  6)  has  23  inputs  and  6  output  functions,  but  each  output  depends 
on  only  10  of  the  inputs.  It  may  not  be  practical  to  exhaustively  test  the  outputs  by  applying  all 
combinations  of  the  network  inputs  (2^^  for  the  example).  However,  it  may  be  possible  to 
exhaustively  test  each  output  by  applying  all  combinations  of  only  those  inputs  on  which  the  output 
depends.  For  the  SN74LS630,  each  output  can  be  exhaustively  tested  with  2^®  =1024  input 
patterns  and  all  six  outputs  tested  one  after  another  with  (6)(1024)=6144  patterns.  In  fact,  for  this 
circuit  it  is  possible,  by  an  appropriate  choice  of  input  patterns,  to  apply  all  possible  input 
combinations  to  each  output  concurrently  rather  than  serially.  Thus,  with  only  1024  rather  than 
(6)(1024)  test  patterns,  each  output  can  be  tested  exhaustively  by  using  the  verification  testing 
techniques  described  in  [McCluskey  84B]  and  [Barzilai  81]. 

The  SN74LS630  is  an  example  of  a  circuit  for  which  it  is  possible  to  test  all  outputs  concurrently 
by  applying  (to  the  entire  circuit)  only  as  many  patterns  as  are  necessary  to  exhaustively  test  one  of 
the  outputs.  Two  inputs  that  never  appear  in  the  same  output  function  can  have  the  same  test  signal 
applied  to  both.  (Applying  the  complement  test  signal  to  one  of  the  two  inputs  is  preferable  since 
this  does  not  increase  the  cost  of  the  test  and  increases  the  bridging  fault  coverage.)  This  fact  can 
be  used  to  reduce  the  number  of  required  test  signals.  If  the  number  of  required  test  signals  is 
equal  to  the  maximum  number  of  inputs  upon  which  any  output  depends,  the  circuit  is  called  a 
maximal  test  concurrency  circuit,  MTC  circuit 

An  example  of  a  very  simple  non-MTC  circuit  with  three  inputs  and  two  outputs  is  shown  in 
Fig.  7.  The  f  output  depends  only  on  inputs  w  and  x,  while  the  g  output  depends  on  x  and  y.  It  is 
possible  to  apply  the  same  test  signal  to  both  w  and  y  since  no  output  depends  on  both  of  these 
inputs.  The  four  input  patterns  shown  in  the  figure  are  such  that  all  possible  combinations  of 
values  are  applied  to  w  and  x,  and  also  all  combinations  of  x  and  y  are  present.  Thus,  both  outputs 
f  and  g  are  tested  exhaustively  by  only  four  input  patterns  rather  than  the  eight  patterns  required  for 
full  exhaustive  test. 
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Figure  7.  Simple  example  of  an  MTC  circuit  with  verification  test  inputs. 

Figure  8  shows  a  very  simple  example  on  a  non-MTC  circuit.  There  are  three  inputs  and  each 
possible  pair  occurs  in  some  output  function.  Thus,  no  two  inputs  can  have  the  same  test  signal 
applied  to  both.  Three  test  signals  are  required;  however,  it  is  possible  to  test  each  of  the  output 
functions  exhaustively  with  only  four  test  patterns.  All  outputs  are  tested  concurrently  with  the 
same  number  of  test  patterns  that  are  necessary  to  test  one  of  the  outputs.  This  is  an  example  of  the 
general  situation  of  an  n-input  circuit  in  which  each  output  depends  on  at  most  n-1  inputs.  Such 
circuits  can  always  have  all  outputs  tested  concurrently  with  at  most  2""'  test  patterns.  The 
appropriate  patterns  are  all  n-bit  vectors  having  the  same  parity  (either  all  even  parity  as  in  Fig.  8  or 
ail  odd  parity). 
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Figure  8.  Simple  example  of  a  3-input,  3-output  non-MTC  circuit  with  verification  test  inputs. 
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A  simple  example  of  a  non-MTC  circuit  for  which  it  is  not  possible  to  verify  (test  concurrently)  all 
outputs  with  the  same  number  of  patterns  required  for  testing  a  single  output  is  shown  in  Fig.  9.  In 
this  circuit,  each  of  the  6  outputs  depends  on  2  of  the  4  inputs.  All  6  outputs  are  verified  with  the  5 
input  patterns  shown  on  the  figure.  To  test  the  circuit  exhaustively  would  require  16  patterns. 
Testing  exhaustively  each  of  the  output  functions  in  succession  t£^es  (4)(6)=24  patterns.  It  is 
possible  to  test  pairs  of  outputs  such  as  fl  and  f6  at  the  same  time  since  they  depend  on  disjoint  sets 
of  inputs.  This  strategy  requires  3  tests  of  4  patterns  each  or  12  total  patterns.  The  numbers  of 
inputs  and  outputs  used  in  this  example  are  too  small  to  be  significant.  However,  it  does  serve  to 
illustrate  the  percentage  reduction  in  test  length  obtainable  with  verification  test  techniques. 
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Figure  9.  Simple  example  of  a  4-input,  6-output  non-MTC  circuit  with  verification  test  inputs. 

It  has  been  shown  in  [McCluskey  84B]  that  any  network  for  which  no  output  depends  on  all  inputs 
can  be  tested  pseudo-exhaustively  with  fewer  than  2"  test  patterns.  This  paper  also  derives  a 
specification  for  test  sets  that  consist  of  constant-weight  vectors.  Theoretical  results  on  the  use  of 
constant-weight  vectors  are  derived  in  [Tang  83]  and  on  the  minimum  number  of  vectors  for  an 
output  verification  test  set  in  [Chandra  83].  Since  constant- weight  counters  are  not,  in  general, 
easy  to  realize  economically,  several  schemes  to  use  linear  feedback  shift  registers  have  been 
developed.  These  are  discussed  in  the  section  on  implementations. 

If  any  output  depends  on  too  many  inputs  (a  typical  bound  is  20  since  this  corresponds  to  a  test 
length  of  approximately  one  million  vectors),  output  verification  is  not  sufficient  as  a  pseudo- 
exhaustive  test.  For  such  a  network,  the  network  (or  that  portion  that  cannot  be  tested  using  output 
verification)  must  be  tested  using  the  techniques  described  in  the  section  on  segmentation  testing. 

For  output  verification  testing,  the  objective  is  to  calculate  a  verification  test  set,  which  is  defined  as 
follows. 
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Definition;  A  Verification  Test  Set  (VTS)  for  a  network  N  is  a  set  of  network  input  patterns.  These 
patterns  have  the  property  that  the  subset  I- of  the  network  inputs,  upon  which  output  fj  depends, 
has  all  possible  combinations  of  values  appUed.  This  must  be  true  for  all  j. 


DEPENDENCE  MATRK 

The  only  information  about  the  network  N  required  to  determine  the  VTS  is  the  input  sets  Ij.  The 

specific  functional  dependence  of  ouputs  on  inputs  is  not  required.  The  required  information  is 
conveniently  represented  by  means  of  the  dependence  matrix  D(N). 

Definition:  The  dependence  matrix  (D(N))  for  a  network  N  has  m  rows  and  n  columns.  Each  row 
represents  one  of  the  network  outputs  and  each  column  one  of  the  network  inputs.  An  entry  is  1  if 
and  only  if  the  corresponding  output  depends  on  the  corresponding  input.  All  other  entries  are  0. 
The  dependence  matrices  for  Figs.  6  and  7  are  shown  in  Table  4. 


Table  4.  Dependence  Matrices  for  Figs.  6  and  7.  (a)  D(N)  for  74LS630  Network  of 
Fig.  6,  (b)  D(N)  for  Fig.  7. 
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Figure  10.  Network  to  illustrate  calculation  of  ly 

The  dependence  matrix  is  simply  calculated  by  tracing  paths  from  outputs  to  inputs.  There  is  the 
possibility  that  this  method  can  result  in  a  situation  in  which  the  matrix  indicates  that  an  output 
depends  on  some  inputs  for  which  there  is  no  functional  dependence  due  to  the  logic  realized  by  the 
network.  For  example,  in  the  network  of  Fig.  10,  path  tracing  would  indicate  that  f  depends  on 
u,v,w,x,y,  while  there  is,  in  fact,  no  functional  dependence  of  f  on  w. 

Better  fault  coverage  is  obtained  by  using  structural  rather  than  functional  dependence.  An  output 
is  more  likely  to  be  affected  by  a  fault  in  a  variable  on  which  the  output  is  structurally  dependent 
than  a  fault  on  which  the  output  has  no  dependence  at  all.  If  the  structural  information  is  available 
there  can  be  two  advantages  in  using  the  structural  rather  than  the  actual  functional  dependency  : 
better  fault  coverage  and  less  computation.  In  some  situations,  only  the  functional  dependence 
information  is  available.  The  dependence  matrix  can  be  constructed  directly  from  this  information 
without  any  consideration  of  the  structure. 


BUILT-IN  TESTING:  EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TESTING  18 


Lemma  1.  Let  Xj  and  Xj  be  two  inputs  of  N  such  that  there  is  at  least  one  output  that  depends  on 
both  Xj  and  Xj.  Then  in  any  verification  test  set  for  N.  x-  and  Xj  must  be  assigned  all  4  possible 
pairs  of  values. 

Lemma  2.  Let  A^=  [Xj ,  Xj  ,...x^]  be  a  subset  of  the  inputs  with  the  property  that  no  two  of  these 
inputs  are  both  present  in  any  Ij  .  Thus  no  output  depends  on  more  than  one  member  of  A^.  A 
VTS  exists  in  which  the  members  of  A^  always  have  the  same  value  assigned  to  all  of  them  for  each 
input  pattern. 

The  first  step  in  finding  a  VTS  is  to  determine  the  subsets  As  which  can  have  common  inputs.  This 
is  done  by  partitioning  the  columns  of  the  dependence  matrix  D(N)  to  form  a  partitioned 
dependence  matrix. 

Definition:  TTie  partitioned  dependence  matrix  (DP(N))  corresponding  to  D(N)  is  formed  by 
partitioning  the  columns  of  D(N)  into  sets  such  that: 

(i)  Each  row  of  a  set  has  at  most  one  1 -entry,  and 

(ii)  the  number  of  sets,  p,  is  a  minimum. 

There  is  a  corresponding  partition,  P,  of  the  network  inputs  in  which  all  inputs  belonging  to  the 
same  set  of  columns  of  DP(N)  are  included  in  the  same  class  A^.  To  determine  the  VTS  for  a 
network,  N,  it  is  first  necessary  to  obtain  a  partition,  P.  For  each  pattern  in  the  VTS,  all  inputs  of 
the  same  class  of  P  are  assigned  the  same  value.  Table  5a  illustrates  this.  The  DP  matrices 
corresponding  to  Table  4  are  shown  in  Table  5. 
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Table  5.  Partitioned  Dependence  Matrices  for  Figs.  6  and  7.  (a)  DP(N)  for  Fig.  6, 
(b)  DP(N)  for  Fig.  7,  (c)  VTS  for  Fig.  7.  (d)  RVTS  for  Fig.  7. 
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P  =  (DB0,DB15)  (DB0,DB15)  (DB0,DB15)  (DB0,DB15)  (DB0,DB15)  (DB0,DB15) 
(DB0,DB15)  (DB0,DB15)  (CBO , CBl, CB2, CB3 , CB4 , CBS)  (SO. SI) 

p  =  10,  W  =  10 
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(c) 

(d) 

w 

w 

y 

X 

w 

y 

X 

y 

X 

11 
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0 
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0 

0 

0 
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0 
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0 

1 

1 

1 

0 

1 

0 

y)  (X) 

r 

p=2,  W=2 

1 

1 

1 

1 

1 

There  may  be  more  than  one  DP(N)  corresponding  to  a  D(N)  matrix,  as  is  illustrated  in  Table  6. 
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Table  6.  Example  of  D(N)  for  which  PD(N)  is  not  Unique,  (a)  D(N),  (b)  DP(N). 


\ 


(a)  (b) 


1 

2 

3 

4 

5 

6 

1 

2  3 

4  5 

6 

1 

2 

3  4 

5 

6 

1 

0 

0 

1 

0 

1  1 

1  1 

0  0  1 

1  0  1 

1  1 

1  1 

0 

10  11 

0 

1  1 

0 

1 

0 

1 

0 

0  1 

1  0 

1  0  1 

1  0  1 

0  1  or 

1  0 

1 

10  11 

0 

01 

0 

0 

1 

0 

1 

0  1 

1  0 

0  1  1 

0  1  1 

0  1 

1  0 

0 

110  1 

1 

01 

p  = 

(1,2, 

3)  (4, 

5)  (6) 

p 

(1,2) (3, 

4) 

(5,6) 

n=6. 

P=3, 

W=3 

6>3=3 

Definition:  Let  W  be  the  maximum  row  weight  (maximum  number  of  Is  in  any  row  of  N). 

Lemma  3.  For  any  N  it  is  true  that  n  >  p  >  W. 

Table  6  shows  an  example  for  which  n  >  p  =  W,  and  a  matrix  for  which  n  >  p  >  W  is  shown  in 
Table  7. 


Table  7.  A  DP(N)  Matrix  for  which  n  >  p  >  W. 


0  0 
1  0 
0  1 
1  0 
0  1 


n  =  4,  p  =  3,  W=2 


VERMCATION  TEST  SET  GENERATION 

It  follows  from  Lemmas  1  and  2  that  a  Verification  Test  Set  can  be  derived  in  which  all  inputs 
corresponding  to  the  same  partition  of  DP(N)  have  the  same  test  signal  applied  and  any  two  inputs 
from  different  partitions  have  distinct  test  signals  applied.  In  the  following  discussion,  only 
verification  test  sets  in  which  all  inputs  of  a  partition  receive  the  same  test  signal  will  be  considered. 
It  is  thus  convenient  to  use  a  reduced  partitioned  dependency  matrix.  In  actual  practice,  it  is  often 
advantageous  to  apply  the  complement  of  a  test  signal  rather  than  the  test  signal  itself  to  some  of  the 
inputs  from  the  same  partition.  The  advantages  of  this  arrangement  are  increased  coverage  of 
bridging  faults  between  two  different  partitions  and  more  equal  loading  on  the  stages  of  the  test 
pattern  generation  circuitry. 
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Definition:  The  reduced  partitioned  dependency  matrix  (RDP(N))  is  obtained  from  DP(N)  by 
replacing  each  column  of  DP(N)  by  a  single  column  in  which  a  row  has  a  1  iff  any  column  of  the 
corresponding  row  of  DP(N)  has  a  1.  DP(N)  has  m  rows  and  p  columns. 

To  avoid  having  to  write  identical  columns  many  times,  a  reduced  verification  test  set  will  be 
specified. 

Definition:  A  reduced  verification  test  set  (RVTS)  is  obtained  from  a  verification  test  set  by 
removing  all  repetitions  of  identical  columns.  Each  column  of  an  RVTS  will  typically  correspond 
to  one  class  of  network  inputs. 

An  example  of  an  RVTS  is  shown  in  Table  5d. 

Theorem  2.  If  p  =  W,  the  minimum-row  RVTS  has  2^  rows  and  each  possible  row  appears 
exactly  once.  The  corresponding  circuit  is  a  maximum  test  concurrency  circuit,  MTC. 

This  is  illustrated  in  Table  5c.  Also,  Table  5a  shows  that  p=W=10  for  the  74LS630  network  of 
Fig.  7.  The  74LS630  parity  generator  can  thus  be  tested  with  a  minimum-length  verification  test  set 
having  2^®  patterns.  This  is  a  considerable  reduction  from  the  2^^  patterns  required  for  classical 
exhaustive  testing.  Each  of  the  six  outputs  could  also  be  tested  exhaustively  in  sequence  with  a 
total  of  (6)(1024)  patterns.  This  strategy  requires  a  longer,  more  complex  test  application 
procedure  and  response  analysis  technique  than  the  minimum-length  verification  test  set. 

Each  row  of  the  RPD(N)  matrix  corresponds  to  one  circuit  output.  The  columns  in  which  the  row 
has  Is  correspond  to  the  input  test  signals  upon  which  that  output  depends.  The  following 
conditions  on  the  RVTS  follow  directly  from  these  observations. 

Theorem  3.  Suppose  that  V  is  a  t  by  p  matrix  representing  a  RVTS  for  RDP(N).  Corresponding  to 
each  row  r^  of  RDP(N)  define  a  submatrix  Vj  of  V  which  consists  of  only  those  columns  of  V 
which  correspond  to  columns  of  RDP(N)  in  which  ri  has  a  1.  Then  if  V  represents  a  RVTS  for 
RDP(N)  each  submatrix  Vi  has  each  possible  binary  combination  appearing  at  least  once. 

This  is  illustrated  in  Table  8.  The  submatrix  Vj  that  consists  of  columns  a,b,  and  d  of  Table  8b  and 
corresponds  to  row  2  of  Table  8a  is  shown  in  Table  8c.  All  eight  possible  combinations  of  three 
bits  occur  in  Table  8c,  thus  satisfying  the  conditions  of  Theorem  3.  Note  that  the  row  11001  is 
missing  from  Table  8a  and  that  the  corresponding  columns  —  a,b,  and  e  —  of  Table  8b  do  not 
contain  all  combinations  (000,  101,  01 1,  and  1 10  arc  missing). 

Table  9  shows  a  V  matrix  for  which  any  3  columns  contain  all  binary  combinations.  This  matrix  is 
a  Universal  RVTS,  a  RVTS  for  any  RDP(^)  having  p=5  and  W=3.  It  is  thus  possible  to  use  the  V 
matrix  of  Table  9  as  a  RVTS  for  Table  8a  in  place  of  the  V  matrix  of  Table  8b.  The  disadvantage  of 
using  Table  9  is  that  it  contains  two  more  rows  than  Table  8b.  The  advantage  is  that  V  matrices 
such  as  Table  9  are  much  easier  to  construct  and  generate  electronically  than  those  such  as  Table 
8b.  Table  8  was  included  to  illustrate  the  general  possibilities  for  RVTS  construction.  Only 
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matrices  such  as  that  of  Table  9  will  be  considered  in  the  following  discussion.  The  ease  of 
construction  and  generation  of  such  matrices  is  felt  to  outweigh  the  disadvantage  of  their  lack  of 
minimality  for  specific  networks.  For  self-test  designs,  the  general  matrices  such  as  Table  9  are  of 
greatest  importance. 

Tables.  An  example  of  a  Verification  Test  Set.  (a)  RDP(N),  (b)  V,  (c)  Vj 
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Table  9.  A  Universal  Verification  Test  Set  for  p=5  and  W=3. 

I  a  b  c  d  e  I 

1  II  0  0  0  Ot 

2  10  1  0  0  01 

3  10  0  1  0  01 

4  1 0  0  0  1  0 1 

5  1 0  0  0  0  1  I 

61011111 
7  I  1  0  1  1  1  I 

81110111 
91111011 
1011  1  1  1  01 


UNIVERSAL  REDUCED  VERIHC ATION  TEST  SETS 

Definition:  A  p-column  matrix  is  a  universal  reduced  verification  test  set  matrix,  U(p,w),  iff  all 
submatrices  of  w  columns  (and  all  rows)  of  U(p,w)  contain  all  possible  combinations  of  w  binar>' 
digits. 

The  matrix  of  Table  9  is  a  U(5,3)  matrix. 
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Lemma  3.  Any  U(p,w)  matrix  is  also  a  U(p,j)  matrix  for  all  j  less  than  w. 

Lemma  4.  A  U(p,w)  matrix  specifies  a  RVTS  for  any  network  with  the  same  value  of  p  and  W=w. 

Theorem  4.  For  p  =  W  +  1,  the  minimum-row  U(p,W)  =  U(W+1,W)  has  2"'  rows.  Two  types 
of  U(W+1,W)  exist:  one  has  all  possible  even-parity  rows  and  the  other  all  possible  odd-parity 
rows.  This  is  illustrated  in  Table  10.  Figure  8  also  shows  a  constant-parity  RVTS. 


Table  10.  Example  of  RVTS  when  p  =  W  +  1.  (a)  DP(N),  (b)  Even-parity  RVTS, 
(c)  Odd-parity  RVTS. 


(a) 

(b) 

(c) 
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1  2  34 
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2  4 

1  2 
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IIUIOOI 
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0  0 

0  0 
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1  1 10 1 10 1 
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1  1 

0  1 
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11 lOIOll 
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0  1 

1  0 

0 

lOUllOl 

lOlllOll 

1 

1  0 

1  1 

1 

Proof.  A  constant-parity  U(w+l,w)  has  w+1  columns  and  2"'  different  rows.  If  one  column  is 
removed,  there  are  1'^  different  w-bit  rows.  (These  produce  an  exhaustive  test  on  the 
corresponding  p  inputs.)  The  bits  of  the  removed  column  are  determined  by  the  requirement  that 
each  w+1  bit  row  have  fixed  parity.  Thus,  if  two  w-bit  rows  were  identical,  the  corresponding 
w+1  bit  rows  would  be  identical.  This  isn't  possible  because  of  the  definition  of  the  U(w+l,w). 
The  constant-parity  U(w+l,w)  has  a  minimum  number  of  rows  since  2"^  rows  are  required  to  have 
all  patterns  occur  in  w  columns. 

When  p  >  W+1,  more  than  2P  patterns  are  required  for  verification  testing  of  the  network.  In  fact, 
finding  the  minimum  set  of  verification  test  patterns  when  p  >  W+1  is  a  difficult  combinatorial 
problem,  which  appears  to  have  been  solved  exactly  only  for  the  case  of  W  =  2,  [Chandra  83]. 
Fortunately,  finding  the  absolute  minimum  test  set  is  of  more  theoretical  than  practical  interest. 
Systematically  derived  test  sets  are  most  useful  for  actual  testing  applications.  It  is  possible  to 
derive  universal  verification  test  sets  as  sets  of  constant-weight  vectors.  Table  11  lists  universal 
verification  test  sets  for  values  of  k  from  2  to  10,  [McCluskey  82b].  Each  U(p,w)  is  made  up  of 
submatrices  containing  all  possible  rows  of  p  columns  having  a  specific  weight  (number  of  1  s). 
For  example,  the  U(5,3)  of  Table  1 1  contains  all  possible  rows  of  weight  1  or  4.  The  notation  used 
in  Table  11  for  specifying  U(p,w)  is  p[ij,k],  which  represents  a  p  column  matrix  containing  all 
possible  rows  of  weight  i,  j,  or  k.  The  notation  B(i,j)  specifies  the  binomial  coefficient  of  i  things 
taken]  at  a  time.  Only  values  of  p>w+l  are  listed  in  Table  11.  When  p=w,  the  U(p,w)  is  simply  all 
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binary  combinations  of  p  bits.  For  p=w+l,  the  U(p,w)  is  all  constant  parity  p-bit  rows.  Proofs  of 
the  entries  in  Table  1 1  can  be  found  in  [Tang  83]. 

The  rows  of  Table  1 1  for  even  values  of  w  have  two  entries  for  U(p,w),  both  of  which  have  the 
same  length.  The  second  entry  can  be  obtained  by  complementing  (interchanging  Os  and  Is)  the 
first  entry.  Odd  values  of  w  produce  minimum-row  matrices  that  are  self-complements.  Since  all 
combinations  must  be  present  in  the  submatrices,  0  and  1  can  be  interchanged  without  disturbing 
the  properties  of  the  matrix. 

Lemma  5.  If  p[i,j,k]  represents  a  U(p,w)  matrix,  then  so  does  p[p-i,p-j,p-k]. 

Table  11.  Specifications  for  U(p,w). 


1 

1  1 

Number  of 

;  1  w 

k  ........ 

U(p,w) 

1  Range  i 

Tests  (rows) 

p[l.p] 

p[2,p-l] 


p+1 

2p 

1/2  p(p+l) 


p[3,p-3] 
p[0, 3,6,9] 


p[3  ,  p-4] 
p[0, 3,6,9] 
p[0,4,8] 


p[4,p-4] 
p[l, 4,7,10] 
p[0,4,8,12] 


p  >  9 
p  =  9 


p[4  ,  p-3] 
p[l, 4,7,10] 
p[3,7,9] 


I  p>  12 
I  p=ll 
I  p=12 


2  B(p,3) 
170 

B(p+1,4) 

341 

496 


2  B(p,4) 
682 
992 


B(p+1,5) 

1365 

2016 

3004 
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Consider  a  circuit  with  n  inputs  and  B(n,w)  outputs  in  which  each  output  depends  on  a  different 
subset  of  w  of  the  circuit  inputs.  Such  a  circuit  represents  a  "worst  case"  circuit  with  limited 
dependency  of  outputs  on  inputs.  A  comparison  of  the  test  lengths  required  for  the  54LS630  using 
different  techniques  is  given  in  Table  12. 


Table  12.  Comparison  of  Different  Test  Lengths  for  Worst-Case  Circuit 


Technique  | 

Test  Length 

1 

n  =  p,  w  1 

w=  10 

o 

II 

II 

c 

Exhaustive  Test  ( 

2"  1 

2" 

1  8,388,608. 

Universal  Verification  Test  | 

U(p,w)  1 

B(n+1,5) 

1  42,504. 

Minimum  Verification  Test  | 

-  1 

1  1,024. 

For  BIST  applications,  the  test  sets  specified  in  Table  11  could  be  implemented  with 
constant-weight  counters.  It  is  also  possible  to  use  LFSRs  (linear  feedback  shift  registers)  to 
generate  verification  test  sets.  The  LFSR  test  sets  are  longer  than  the  constant-weight  test  sets,  but 
require  fewer  components.  These  issues  are  discussed  further  in  the  section  on  implementations. 


SEGMENT  VERinCATION  TESTING 

It  is  possible  that  an  output  verification  test  set  for  a  particular  circuit  is  too  long.  This  could  be 
because  some  outputs  depend  on  all  inputs  and  2*^  is  too  large;  or  because  the  output  verification 
test  set,  even  though  smaller  than  2*^,  is  too  long.  In  other  words,  there  are  circuits  for  which  the 
output  verification  test  approach  does  not  result  in  a  satisfactory  test  procedure.  A 
pseudo-exhaustive  test  is  still  possible  for  such  circuits,  but  it  is  necessary  to  resort  to  a  partitioning 
or  segmentation  technique,  [Bozorgui-Nesbat  80],  [McCluskey  80,81].  The  circuit  is  segmented 
into  two  or  more  subcircuits,  and  each  segment  is  tested  exhaustively. 

Figure  1 1  shows  Circuit  A,  a  simple  6-input,  2-output  circuit  which  will  be  used  to  illustrate  this 
technique.  An  exhaustive  test  of  this  circuit  takes  64  test  vectors  since  n  =  6.  Output  verification 
can  be  done  with  32  vectors  since  Fj  depends  on  5  inputs.  Two  segments  are  shown  on  the  figure: 
Segment  G  with  inputs  W,X,Y  and  output  g;  and  Segment  H  with  inputs  U,V,g,Z  and  ouputs  F, 
and  Fj. 
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In  order  to  test  segment  G  exhaustively,  all  8  combinations  must  be  applied  to  inputs  W,X,Y  and 
the  response  at  g  must  be  observed.  Application  of  the  input  combinations  can  be  done  directly 
since  all  of  the  segment  inputs  are  circuit  primary  inputs.  Observation  of  the  response  requires  that 
g  be  observable  at  a  circuit  primary  output.  This  can  be  accomplished  by  using  a  multiplexer  to 
connect  g  to  a  circuit  output  during  test  or  by  setting  the  other  primary  inputs  to  the  circuit  so  as  to 
sensitize  a  path  from  g  to  an  output.  By  setting  Z  =  1,  a  path  is  sensitized  from  g  to  F2.  This 
airangement  is  shown  in  Figure  12,  along  with  the  corresponding  test  patterns. 


Figure  11.  Circuit  A,  a  simple  example  circuit  with  two  segments  shown. 
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Exhaustive  Test  of  g 
Sensitized  to  F2  by  Z  =1 

Figure  12.  Exhaustive  test  of  segment  G  of  Circuit  A. 


The  exhaustive  test  of  segment  H  requires  that  its  inputs,  U,V,g,  Z  be  cycled  through  all  16 
combinations.  These  are  shown  in  Table  13a  along  with  the  patterns  for  segment  G.  The  24 
patterns  of  Table  13a  can  be  compressed  since  patterns  4  and  13  can  be  combined  by  filling  in  the 
unspecified  entries  in  pattern  4  to  make  it  identical  with  the  specified  entries  of  pattern  13.  Similar 
combinations  are  possible  for  pattern  pairs  (5,21),  (6,22),  (7,23),  (8,24).  This  compression 
results  in  the  19  patterns  shown  in  Table  13b.  Since  segment  H  is  a  multi-output  circuit,  it  is 
possible  to  test  it  with  an  output  verification  test  rather  than  a  full  exhaustive  test.  This  technique 
requires  the  12  patterns  shown  in  Table  13c. 
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Table  13.  Pseudo-Exhaustive  Test  Sets  for  Circuit  A.  (a)  Exhaustive  Test  Sets  for  Segments  G 
and  H,  (b)  Compression  of  Test  Sets  of  a,  (c)  Exhaustive  Test  Set  of  Segment  G  and 
Output  Verification  Test  Set  of  Segment  H. 
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The  segment  verification  method  illustrated  by  this  example  requires  that  the  circuit  be  segmented 
into  subcircuits  that  each  have  fewer  segment  inputs  that  the  number  of  circuit  inputs.  If  the 
numbers  of  segment  inputs  are  a,b,...c,  the  test  length  will  be  less  than  or  equal  to  2^  +  2^  +  ...  + 

2^.  The  segmentation  is  best  provided  by  the  circuit  designer.  TTie  process  of  circuit  segmentation 
is  similar  to  the  system  partitioning  that  must  be  done  to  fit  a  system  on  individual  boards  and  chips. 
If  the  designer  does  not  provide  a  circuit  segmentation,  the  segments  must  be  found  by  running  a 
segmentation  program,  [Shperling  87],  [Min  86],  [Roberts  84]. 

In  order  to  exhaustively  test  each  subcircuit,  all  subcircuit  inputs  must  be  controllable  at  the  input  of 
the  circuit  and  all  subcircuit  outputs  must  be  observable  at  the  circuit  outputs.  This  can  be 
achieved  in  two  ways:  (1)  hardware  partitioning  and  (2)  sensitized  partitioning.  Access  to  the 
embedded  inputs  and  outputs  of  the  subcircuit  under  test  can  be  achieved  by  inserting  multiplexers 
and  connecting  the  embedded  inputs  and  outputs  of  each  subcircuit  to  those  primary  inputs  and 
outputs  that  are  not  used  by  the  subcircuit  under  test  [Bozorgui  80].  By  controlling  the  multiplexers, 
all  the  inputs  and  outputs  of  each  subcircuit  can  be  accessed  using  primary  input  and  output  lines. 
Multiplexers  can  reduce  the  operating  speed  of  the  circuit  and  are  costly  to  implement.  However,  it  is 
possible  to  achieve  the  same  testing  discipline  without  actually  inserting  any  multiplexers  at  all. 

Circuit  segmentation  and  subcircuit  isolation  can  also  be  implemented  by  applying  the  appropriate 
input  pattern  to  some  of  the  input  lines.  The  effect  achieved  is  similar  to  that  of  hardware 
partitioning:  paths  from  the  primary  inputs  to  the  subcircuit  inputs  and  paths  from  the  subcircuit 
output  to  the  primary  output  can  be  sensitized.  Using  these  paths  each  subcircuit  can  be  tested 
exhaustively.  The  methods  to  determine  the  appropriate  inputs  to  sensitize  the  appropriate  paths  are 
based  on  the  sensitization  techniques  of  the  well-known  D  Algorithm.  The  details  are  discussed  in 
[Udell  86].  An  example  of  the  use  of  segment  verification  for  the  '181  ALU  is  described  in 
[McCluskey  81]. 


FAULT  COVERAGE 

The  various  test  techniques  described  differ  in  their  fault  coverage.  Exhaustive  testing  has  the  best 
coverage  —  all  testable  combinational  faults.  It  is  easy  to  show  that  output  verification  testing 
detects  all  testable  combinational  faults  that  do  not  increase  the  dependency  of  outputs  on  inputs  (add 
entries  to  the  dependence  matrix).  Segment  verification  testing  is  guaranteed  to  detect  all  testable 
combinational  faults  that  are  confined  to  a  single  segment,  [Archambeau  84].  Faults  that  are  not 
guaranteed  to  be  detected  may  also  be  detected,  but  their  detection  cannot  be  guaranteed  in  general. 
In  fact,  it  is  not  easy  to  generate  examples  of  faults  that  are  not  detected  by  any  of  these  test 
procedures.  Such  an  example  is  given  in  [Archambeau  84],  but  it  involves  a  circuit  designed 
specifically  to  exhibit  such  a  fault. 


BUILT-IN  TESTING:  EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TESTING 


.^0 


Single-stuck  faults  are  guaranteed  to  be  detected  by  exhaustive  and  pseudo-exhaustive  tests  so  that 
fault  simulation  is  not  required  to  demonstrate  100%  single-stuck  fault  coverage.  Large  segments 
are  preferred  for  segment  verification  because  they  guarantee  greater  fault  coverage  than  smaller 
segments. 


BBT  IMPLEMENTATIONS 

There  are  two  general  classes  of  BIST  architectures:  (1)  external  BIST,  in  which  test  pattern 
generation  and  response  analysis  is  done  by  circuitry  that  is  separate  from  the  functional  circuitry 
being  tested,  and  (2)  internal  BIST,  in  which  the  functional  bistables  are  converted  into  test  pattern 
generators  and  response  analyzers,  [Bardell  83],  [McCluskey  85].  Some  external  BIST  schemes 
test  sequential  logic  directly  by  applying  test  patterns  at  the  inputs  and  analyzing  the  responses, 
[Resnick  83],  [Lake  86],  [Vacca  87].  The  techniques  discussed  here  do  not  apply  to  such  situations 
since  the  test  patterns  are  for  combinational  circuits  only.  The  BIST  schemes  discussed  here  all 
assume  that  the  functional  bistables  of  the  circuit  being  tested  can  be  converted  into  a  scan  path  for 
testing,  [McCluskey  86].  Such  schemes  are  much  more  common  than  those  that  involve  sequential 
circuit  testing. 

Only  the  test  pattern  generation  circuitry  is  discussed  here  since  signature  analysis,  [McCluskey  86], 
can  be  used  to  analyze  the  output  response  for  any  of  the  test  schemes  considered.  Signature 
analysis  is  the  only  BIST  output  response  analysis  scheme  currently  in  use. 

For  exhaustive  testing,  a  full  cycle  counter  is  adequate  for  either  external  or  internal  BIST.  A  binary 
counter  can  be  used,  but  a  linear  feedback  shift  counter  modified  to  product  the  all-0  state  is  usually 
more  economical,  [McCluskey  86],  [Wang  86C,D,E].  The  modified  LFSR  is  adequate  since  the 
sequence  in  which  the  patterns  are  applied  is  not  critic^.  The  implementation  of  exhaustive  testing  in 
the  Intel  80386  is  described  in  [Gelsinger  86]  and  [Gelsinger  87]. 

Many  different  schemes  have  been  proposed  for  output  verification  testing.  The  simplest  uses  a  full 
period  counter  to  provide  one  test  signal  for  each  D(N)  partition,  [Barzilai  81],  [McCluskey  83], 
Multiplexers  must  be  used  to  connect  the  same  test  signal  to  all  inputs  of  a  partition  during  testing. 
For  non-MTC  circuits  in  which  more  test  signals  are  required  than  p,  the  number  of  partitions,  the 
test  length  can  often  be  reduced  by  using  a  verification  test  set  to  avoid  the  generation  of  all  2P  input 
patterns.  Universal  verification  test  sets  can  be  generated  with  constant-weight  counters,  [Ichikawa 
82].  The  drawbacks  to  this  technique  are  the  difficulty  of  designing  constant-weight  counters  and 
their  high  component  count.  These  drawbacks  are  avoided  at  the  expense  of  longer  test  times  by 
using  LFSRs  to  generate  the  VTS,  verification  test  sets. 
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A  simple  scheme  that  uses  maximum-length  LFSRs  to  generate  the  VTS  has  an  LFSR  and  a  network 
of  XOR  gates  to  generate  the  test  signals,  [Akers  85],  [Vasanthavada  85].  This  approach  is 
particularly  efficient  for  circuits  with  low  values  of  w  (the  number  of  inputs  upon  which  each  output 
depends).  They  are  good  for  internal  rather  than  external  BIST  architectures  since  they  have  fewer 
bistables  than  test  signals,  making  it  difficult  to  do  the  parallel-to-serial  conversion  required  for 
shifting  signals  into  the  scan  path. 

It  is  also  possible  to  use  a  non-maximum-length  LFSR  to  generate  the  test  patterns.  Designs  based 
on  this  structure  require  fewer  components  than  those  using  full-length  LFSRs,  have  the  same 
length  test  sets  for  large  w,  and  can  be  used  for  either  internal  or  external  BIST,  but  they  are  more 
complex  to  design  than  those  using  maximum-length  LFSRs  and  an  XOR  network.  The  designs  are 
based  on  using  a  non-primitive  polynomial  for  the  LFSR.  The  appropriate  polynomial  can  be  found 
by  using  methods  based  on  ceding  theory.  Techniques  based  on  linear  codes  are  described  in 
[Wang  84],  [Tang  84],  [Wang  86A,B].  Other  techniques  are  based  on  cyclic  codes,  [Wang  84B], 
[Wang  87A],  shortened  cyclic  codes,  [Wang  87B],  and  punctured  cyclic  codes,  [Chen  87]. 

Less  attention  has  been  devoted  to  BIST  implementations  for  segment  verification  tests.  A  design  of 
such  a  structure  for  the  181  ALU  is  presented  in  [McCluskey  81].  In  [Udell  87]  general  BIST 
methods  for  implementing  segment  vei^ication  are  described. 


CONCLUSIONS 

Techniques  for  exhaustive  and  pseudo-exhaustive  testing  of  combinational  circuits  have  been 
presented.  They  are  suitable  for  BIST.  Compared  to  pseudo-random,  testing  they  require  more 
analysis  in  order  to  design  the  test  pattern  generation  circuitry.  The  exhaustive  techniques  have  the 
advantage  of  guaranteeing  100%  detection  of  all  testable  single-stuck  faults  without  the  fault 
simulation  needed  to  determine  coverage  of  random  tests.  Exhaustive  and  pseudo-exhaustive  tests 
provide  very  high  coverage  of  failure  modes  that  are  not  adequately  represented  as  single-stuck 
faults  such  as  multiple-stuck  faults,  bridging  faults,  intermittent  failures.  Of  all  the  presently  known 
test  pattern  generation  methods,  exhaustive  and  pseudo-exhaustive  tests  provide  the  highest  quality 
test.  Further  research  is  needed  to  develop  better  structures  for  implementing  pseudo-exhaustive 
testing. 
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EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TEST 


Introduction 


Exhaustive  Test 


Pseudo-exhaustive  Test 


Output  Function  Verification 
Segment  Function  Verification 
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TEST  INPUT  PATTERN  SELECTION 
Fault  Model  Based 
Function  Based 
Random  and  Pseudo-random 
Exhaustive  Test  and  Pseudo-exhaustive 

(All  assume  faults  do  not  increase  number  of  internal  states) 
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EXHAUSTIVE  and  PSEUDO-EXHAUSTIVE  TEST 


ADVANTAGES 

No  ATPG  program  required 

No  fault  simulation  required 

No  circuit  modification  required 
to  increase  fault  coverage 

Very  high  fault  coverage 

Suitable  for  built-in  self  test 
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EXHAUSTIVE  TEST  DISADVANTAGES 
Long  Test  Time 

Large  Volume  of  Test  Output  Data 

Combinational  circuits  require  2^ 
test  vectors  for  n-input  circuit 

Sequential  circuits  require  <0(2'^)  (k^) 
test  vectors  for  k-state  circuit 
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EXHAUSTIVE  TEST 

CIRCUITS  TO  GENERATE  INPUT  PATTERNS 
Binary  Counter 
Linear  Feedback  shift  register 
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PSEUDO-EXHAUSTIVE  TEST 

USED  WHEN  EXHAUSTIVE  TEST  TOO  LONG 

Individual  Output  Verification 

Exhaustive  Test  of  Each  Output 
No  Output  Depends  on  All  Inputs 

Network  Partitioned  or  Segmented 
Exhaustive  Test  of  Each  Segment 
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COMBINATIONAL  CIRCUIT  CLASSIFICATION 


PARTIAL  DEPENDENCE  CIRCUIT  -  PDC 
No  output  depends  on  all  inputs 

Verification  test  techniques  useful 

FULL  DEPENDENCE  CIRCUIT  -  FDC 
Some  output  depends  on  all  inputs 

Segmenting  (partitioning)  required 
for  pseudo-exhaustive  testing 
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PSEUDO  -  EXHAUSTIVE  TEST 
INDIVIDUAL  OUTPUT  VERIFICATION 

Serial  vs.  Parallel 


Two  test  signals 

Maximal  Test  Concurrency  (MTC) 
Circuit 


PDC  CLASSIFICATION 

MAXIMAL  TEST  CONCURRENCY  CIRCUIT 
(MTC  Circuit) 

Number  of  test  signals  required  =  Maximum  number  of 
inputs  connected  to  any  output 

NON-MAXIMAL  TEST  CONCURRENCY  CIRCUIT 
(NMTC  Circuit) 

Number  of  test  signals  required  =  Greater  than  the 

maximum  number  of  inputs  connected  to  any  output 
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t1  1100  w 
t2  1010  X 


t3  0110  y 


t3  0110  2 


h(w,  z) 


Four  ■  input  NMTC  circuit 
3  test  signals  -  4  test  patterns 
minimum  -  length  test 


Circuit  of  exampie  2 


D(N) 


outputs 

inputs 
w  X  y  z 

f  (w,  x) 

110  0 

g  (X,  y) 

0  110 

h  (w,  z) 

10  0  1 

DP(N) 

inputs 

outputs  wlxl  y  z 

f  (w,  X)  11  0  0 

g  (w,  y)  0  1  1  0 
h  (X,  z)  10  0  1 


Each  row  of  a  partition  can  have  at  most  1  entry 

DP(N)  is  not  Unique 

wy  or  xz  partition  possible 
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outputs 

f  (W,  X) 

g  (w,  y) 

h  (x,  z) 


test 

patterns 


inputs 

y 

W  X  z 


1 

1 

0 

1 

0 

1 

0 

1 

1 

RDP(N) 


t1  t2  t3 
11110 
1  0  1 
0  1  1 
0  0  0 


RVTS(N) 


NMTC  Circuit 

Sharp  VTS  -  4  test  patterns 
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VERIFICATION  TEST  SETS  -  VTS 

Each  output  has  its  inputs  cycled  through  all  possible 
combinations 

SHARP  VERIFICATION  TEST  SET 

Test  Set  Length  =  Maximum  length  of  exhaustive  test  set 
for  single  output 

Minimum  length  VTS 
Meets  lower  bounds  on  VTS 
Always  exists  for  MTC  circuit 
Sometimes  exists  for  NMTC  circuit 
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1110  0  w 

110  10  X 

10  110  y 

0  1110  z 


NMTC  Circuit  with  Test  Inputs 
4-Inputs,  6-Outputs,  5  Test  Patterns 
No  Sharp  VTS  Possible 


July  8,  1987 


EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TEST 


fl(vwx) 

111100  I 

f2(vwy) 

|1  1  01  0  1 

Dependence 

f3(VX2) 

110101  1 

Matrix 

f4(vyz) 

110011  1 

fgCwxy) 

101110  1 

fgCwxz) 

101101  1 

f7(wyz) 

101011  1 

tsCxyz) 

100111  1 
vwX  Yz 

11  0000  1 

10001  1  1 

Verification 

100101  1 

Test  Set 

Test 

110110  1 

Patterns 

11  1001  1 

NMTC  Circuit 

101010  1 

Sharp  VTS 

101100  1 
111111  1 

8  Test  Patterns 
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1 

U  (5,3) 
vw  X  y  z 

1  0000 

Universal 

2 

01000 

Verification 

3 

00100 

Test  Set 

4 

0001  0 

for 

5 

00001 

5  Test  Signals 

6 

01111 

(p  =  5) 

7 

10  111 

Maximum  output 

8 

11011 

Dependence  on 

9 

1110  1 

3  Inputs 

10 

11110 

(w  =  3) 

Sharp  VTS  not  possible 
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a! 


I 


I 

I 

I 


Sharp  Verification  Test  Set  for 
p  =  number  of  test  signais  =  3 
w  =  Maximum  Output  Dependence  =  2 
(p  =  w  +  1) 

Even  Parity  Odd  Parity 

X  y  z  X  y  z 


0  0  0 
0  1  1 
1  0  1 
1  1  0 


0  0  1 
0  1  0 
1  0  0 
1  1  1 


Sharp  VTS  aiways  possibie  for  p  =  W  +  1 
using  aii  constant  parity  vectors 
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Specifications  for  U(p,  w) 
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Comparison  of  Different  Test  Lengths  for  Worst-Case  Circuit 


PSEUDO-EXHAUSTIVE  TEST 
INDIVIDUAL  OUTPUT  VERIFICATION 

Fault  Coverage 

ALL  Irredundant  Faults  that 

leave  UNCHANGED  or  DECREASE 
dependency  of  Output  Functions 
on  Input  Variables 

SOME  Irredundant  Faults  that 
INCREASE 

dependency  of  Output  Functions 
All  Irredundant  Single  Stuck  Faults 
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66 


PET  OUTPUT  FUNCTION  VERIFICATION 


Input  Pattern  Generation 

Constant-weight  Counter 
Linear  Feedback  Shift  Register 
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PET  SEGMENT  FUNCTION  VERIFICATION 
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Select  Network  Segments 
Test  Time  Order  2"v...+2"i‘ 
Instead  of 

Test  Time  Order  2"^* 

Implement  Segments  using 
Path  Sensitization  or 
Multiplexers 
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^•v"f  vjr\ 


EXHAUSTIVE  TEST  LENGTH:  6 

PET  OUTPUT  VERIFICATION  LENGTH:  3 
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70 


Exhaustive  Test  of  g  Sensitized  to  F  2  by  Z  =  1 
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■»> 


UV  OR  gate  sensitized 
to  Fi  by  g  =  1. 


Segmentation  by  Multiplexers 


PET  SEGMENT  FUNCTION  VERIFICATION 
Simple  Example  Network  Test  Lengths 
Exhaustive  Test 

PET  Output  Function  Verification 

PET  Segment  Function  Verification 

Path  Sensitization 
Multiplexers 
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SEGMENTATION  OF  181  ALU 


AO  BO  A1  B1  A2  B2  A3  B3 


2"*^  Exhaustive  Test  Patterns 
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PET  VERIFICATION  OF  LI  FUNCTIONS 
16  TEST  INPUT  PATTERNS 


PET  VERIFICATION  OF  N2  FUNCTIONS 
Hi  =  (Ai  Bi)’,  LI  =  Ai’  (No  HiLi  =  01) 

3^  AB  tests  2^  MCn  tests,  =  324  tests 
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PET  SEGMENT  FUNCTION  VERIFICATION 
181  ALU  Network  Test  Lengths 
Exhaustive  Test  409i 

Output  Function  Verification  409i 

Segment  Function  Verification  356 
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EXHAUSTIVE  and  PSEUDO-EXHAUSTIVE  TEST 

Is  2^  Test  Length  Short  Enough? 

YES  -  Use  Exhaustive  Test 

NO  -  Compute  Dependency  Matrix 
and  Partitioned  Dependency  Matrix 

Is  U(p,  w)  Test  Length  Short  Enough? 

YES  -  Use  PET  Output  Verification 

NO  -  Determine  Network  Segments 
for  Segment  Function  Verification 

Place  Multiplexers  or  Compute 
Inputs  to  Sensitize  Outputs 


EXHAUSTIVE  AND  PSEUDO-EXHAUSTIVE  TEST 
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EVALUATION 

Possibly  Required 

Fault-Free  Simulation 
Dependence  Matrix  Calculation 
Partitioning  of  D(N) 

Segmentation  Calculation 
Sentization  Calculation 
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EXHAUSTIVE  and  PSEUDO-EXHAUSTIVE  TEST 

EVALUATION 
Not  Required 

Fault  Simulation 

ATPB  (LASAR)  program 
Testability  Measure  Program 

Circuit  Modification  to  increase 
fault  coverage 

Very  high  fault  coverage: 

Single  Stuck  Faults  All  Detected 
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